To stay updated on your favorite discussions, please create an account or log in. Then, click the Bookmark icon to subscribe and receive notifications.

Scan Outlook archived PST files

Nippy
Nippy Posts: 1 Security Scout

F-Secure had virus alert on one of the user's email archived pst file. That archived file is over 200MB. F-Secure doesn't seems to be able to report which file was infected. Also it seems like F-Secure is not able to clean or quarantine any malicious items within the archived pst file. What are my options? Also, can F-Secure scan inside any pst files? Thanks in advance for assistance.

Comments

  • SeanV
    SeanV Posts: 19 Cyber Knight

    Dear Nippy,

    With regards to your enquiry, kindly refer to the below community post:

     

    http://community.f-secure.com/t5/Security-for-PC/How-to-find-which-mailbox-is/td-p/30358
     
    Thanks.
    Best Regards,
    Sean Veloo

    ..........................................................................................................................................................................................................................
    Has somebody helped you? Say thanks by giving kudos. Has your issue been solved? Mark the post using "Accept As Solution" button to let others know.

  • NikK
    NikK Posts: 28 Firewall Master

    If anyone finds this thread you should know that there is a VBA program(code) that can extract and save all attachments from an Outlook folder including subfolders, so you then easily can scan the folder with all attachments to find which emails are infected. Each file name includes the name of the datafile(PST), folder name, email subject and attachment name so it's easy to identify and delete those emails in Outlook.

    It only extracts the attachments because it's highly unlikely that an email body is infected. And that also heavily reduces the number of files that needs to be created on the hard drive. It's been tested and proved successful with over 2 GB of emails. 

     

    Instructions and the VBA code can be found here:

    http://community.f-secure.com/t5/Security/virus-s-imside-Aquarius/m-p/40627/highlight/true#M7398

     

    In case you run into any problem, also read the following 2 pages in the linked thread above. Those cover the most likely problem scenarios.

This discussion has been closed.

Categories